Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 32 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-58535
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,92% | 14 Jul 2026 |
|
CVE-2026-58534
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58533
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
|
7.5 High | — | 0,92% | 14 Jul 2026 |
|
CVE-2026-58532
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-58531
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a netw...
|
7.5 High | — | 0,51% | 14 Jul 2026 |
|
CVE-2026-58530
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
|
7.8 High | — | 0,36% | 14 Jul 2026 |
|
CVE-2026-58529
microsoft windows 11 26h1
Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.
|
7.1 High | — | 1,0% | 14 Jul 2026 |
|
CVE-2026-58528
microsoft windows 10 1809, microsoft windows 10 21h2 +7 lainnya
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
|
4.6 Medium | — | 0,52% | 14 Jul 2026 |
|
CVE-2026-58527
microsoft windows 11 24h2, microsoft windows 11 25h2 +3 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally...
|
7.0 High | — | 0,21% | 14 Jul 2026 |
|
CVE-2026-58277
microsoft sharepoint server
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,94% | 14 Jul 2026 |
|
CVE-2026-57982
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,00% | 14 Jul 2026 |
|
CVE-2026-57973
microsoft windows subsystem for linux
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.
|
4.7 Medium | — | 0,22% | 14 Jul 2026 |
|
CVE-2026-57968
microsoft windows subsystem for linux
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-57108
microsoft .net
Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.
|
7.5 High | — | 1,2% | 14 Jul 2026 |
|
CVE-2026-57102
microsoft visual studio code
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
|
8.8 High | — | 0,82% | 14 Jul 2026 |
|
CVE-2026-57101
microsoft visual studio code
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature lo...
|
6.1 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-57096
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-57095
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally.
|
7.8 High | — | 0,49% | 14 Jul 2026 |
|
CVE-2026-57094
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | 0,82% | 14 Jul 2026 |
|
CVE-2026-57093
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 14 Jul 2026 |
|
CVE-2026-57092
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
|
9.9 Critical | — | 0,91% | 14 Jul 2026 |
|
CVE-2026-57091
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-57090
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,82% | 14 Jul 2026 |
|
CVE-2026-57089
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,67% | 14 Jul 2026 |
|
CVE-2026-57088
microsoft windows 10 1809, microsoft windows server 2019 +2 lainnya
Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,30% | 14 Jul 2026 |
|
CVE-2026-57087
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
7.8 High | — | 0,79% | 14 Jul 2026 |
|
CVE-2026-57085
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
|
3.3 Low | — | 0,37% | 14 Jul 2026 |
|
CVE-2026-57084
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 14 Jul 2026 |
|
CVE-2026-57083
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 14 Jul 2026 |
|
CVE-2026-56650
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-56649
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code...
|
8.1 High | — | 0,70% | 14 Jul 2026 |
|
CVE-2026-56648
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
|
7.5 High | — | 0,51% | 14 Jul 2026 |
|
CVE-2026-56647
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,91% | 14 Jul 2026 |
|
CVE-2026-56644
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-56643
microsoft windows 10 1607, microsoft windows 10 1809 +9 lainnya
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-56642
microsoft fabric data warehouse
Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,91% | 14 Jul 2026 |
|
CVE-2026-56197
microsoft windows admin center
Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.
|
8.8 High | — | 0,99% | 14 Jul 2026 |
|
CVE-2026-56196
microsoft windows admin center
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.
|
8.8 High | — | 1,0% | 14 Jul 2026 |
|
CVE-2026-56195
microsoft 365 apps, microsoft 365 +4 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,54% | 14 Jul 2026 |
|
CVE-2026-56194
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.
|
8.8 High | — | 0,91% | 14 Jul 2026 |
|
CVE-2026-56192
microsoft 365 apps, microsoft 365 +5 lainnya
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
|
5.5 Medium | — | 0,60% | 14 Jul 2026 |
|
CVE-2026-56190
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
|
9.8 Critical | — | 0,97% | 14 Jul 2026 |
|
CVE-2026-56189
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
|
8.4 High | — | 0,39% | 14 Jul 2026 |
|
CVE-2026-56188
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute co...
|
8.1 High | — | 0,61% | 14 Jul 2026 |
|
CVE-2026-56187
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,28% | 14 Jul 2026 |
|
CVE-2026-56186
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
|
6.5 Medium | — | 1,1% | 14 Jul 2026 |
|
CVE-2026-56184
microsoft windows 10 21h2, microsoft windows 10 22h2 +5 lainnya
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
|
5.5 Medium | — | 0,48% | 14 Jul 2026 |
|
CVE-2026-56183
microsoft windows 11 24h2, microsoft windows 11 25h2 +1 lainnya
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
|
7.0 High | — | 0,26% | 14 Jul 2026 |
|
CVE-2026-56182
microsoft windows 10 1607, microsoft windows 10 1809 +10 lainnya
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
|
7.8 High | — | 0,33% | 14 Jul 2026 |
|
CVE-2026-56181
microsoft windows 11 24h2, microsoft windows 11 25h2 +2 lainnya
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
|
8.3 High | — | 0,28% | 14 Jul 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.